$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft File: MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json) Hash identifier: RVCvA20RI/2AB6mKWEX6kf8ngEjU12ncT0V08pSGaQg= Subject key identifier: 18:2C:97:C1:88:39:D2:D1:16:B9:2C:E7:91:E8:DB:6A:6A:5E:B6:C1 Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 0196BDB7327D0FA3406258464A74759A5290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft Manifest number: 15CD Signing time: Sun 11 May 2025 05:00:21 +0000 Manifest this update: Sun 11 May 2025 05:00:21 +0000 Manifest next update: Mon 12 May 2025 05:00:21 +0000 Files and hashes: 1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=) 2: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=) 3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=) 4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: XeMn/gbBWtv0sm5mvGn7eNw3PwH3Bon5tgUl009YsZQ=) 5: QqT-BvbiqSOYuM4Lk4hz0YSVQ1I.roa (hash: F9VEIK5Zux7AgHQDn3EERLEADA0kYEbfVteSN7+buqQ=) 6: SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa (hash: R1Xjt4d6fbhtdYnW5OsTMCBTcoqdj84LM2GJBD6GMIY=) 7: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=) 8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=) 9: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=) 10: n-CxE-sLgsFeR17bn7XmAKrCNq0.roa (hash: mwly/ao+vXEKbQeJ+XNXv81dFwjdgRZmDPnXBYLigws=) 11: rELDabhnIWczGPpdcFPbIHRUmiM.roa (hash: C3tLRE4vf2kTivHGIZ50gcjmBmCNhZmWayfOhcglSbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 05:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:b7:32:7d:0f:a3:40:62:58:46:4a:74:75:9a:52:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: May 11 05:00:21 2025 GMT Not After : May 12 05:00:21 2025 GMT Subject: CN=182c97c18839d2d116b92ce791e8db6a6a5eb6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:00:bd:21:51:ee:21:44:6e:ab:1c:82:3c: 02:94:10:63:35:e7:a4:70:50:89:71:ab:77:32:a9: bf:c4:e3:02:54:f3:23:db:a2:d1:86:b6:43:57:59: dc:ad:5f:d9:71:8c:e2:e9:a1:d9:44:7a:37:2c:40: 06:11:24:94:05:8c:6a:ed:35:dd:c0:00:6b:b5:c6: 85:db:49:c8:19:bf:3f:5e:e6:d0:9a:89:b6:bd:c2: 04:5d:70:bc:df:d9:bd:60:be:64:da:95:d4:b2:11: 46:45:f9:29:46:41:dc:2a:c6:c0:c8:4a:c7:60:14: 36:7c:73:06:99:7d:0e:fb:00:7f:bf:c9:92:9d:bd: d6:09:f5:4c:46:ee:07:e1:f8:d3:bf:88:86:9a:12: e8:0a:7b:5c:ae:67:19:8b:a9:32:0b:78:1c:d9:04: 1e:0a:56:a3:7d:53:ca:04:94:10:1d:0d:9e:2e:ae: 10:e2:20:e3:b2:69:6a:7f:fc:c1:8e:c8:55:43:d4: fd:65:7a:c9:26:63:f7:50:7d:a4:2a:e0:f6:aa:6a: f4:76:cf:ef:24:eb:fe:ac:d1:4a:9d:ae:b0:a3:37: 1d:d0:75:a2:95:bf:1b:1d:81:8b:f0:1b:b1:83:a3: 37:ca:08:a1:69:5c:4d:25:3b:05:d2:9d:67:be:fc: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2C:97:C1:88:39:D2:D1:16:B9:2C:E7:91:E8:DB:6A:6A:5E:B6:C1 X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b6:60:d2:94:c0:39:ff:56:13:84:14:28:14:c8:ac:60:77: cd:2e:fe:b8:13:2f:4f:24:d2:32:c1:4f:e4:ee:39:4d:de:d4: d0:e7:f8:e5:73:28:ab:87:04:10:88:27:f4:0d:bc:6f:38:26: 56:39:ae:dd:fe:45:ae:8f:e6:64:cb:1f:71:7c:e6:c8:66:ce: e6:4b:a4:43:fc:07:b5:03:76:dc:f9:a6:db:ee:31:08:b8:a6: b9:0f:a1:25:c4:5c:f4:34:5e:f0:b1:c1:95:20:55:19:31:1b: 01:66:ac:f9:b5:93:20:f0:b3:d0:11:b0:c5:fc:27:3f:e8:0d: 55:cf:71:ea:a0:17:77:3e:b3:0c:4c:bb:3b:49:af:41:c1:9d: c9:31:c2:b7:a1:07:48:d5:8d:c8:b8:ad:a2:e5:ad:d6:cf:fb: 9d:59:b6:51:84:ce:59:3c:65:d6:b7:a1:2a:87:b0:7f:fc:91: f4:fe:6d:02:aa:51:29:14:66:a3:54:0a:2e:8a:f4:52:dc:8f: d9:a1:d7:4a:aa:e8:63:81:34:31:93:2b:8f:25:0c:d4:0b:f6: f5:18:f6:27:1e:8b:b1:c0:3d:1b:7e:b6:ec:5f:4b:a4:1f:67: 29:46:0d:53:e6:c4:bc:27:9c:9c:fa:31:36:cb:75:3d:62:3e: 5d:d7:4a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9tzJ9D6NAYlhGSnR1mlKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjUwNTExMDUwMDIxWhcNMjUwNTEyMDUwMDIxWjAzMTEwLwYDVQQD EygxODJjOTdjMTg4MzlkMmQxMTZiOTJjZTc5MWU4ZGI2YTZhNWViNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TkAvSFR7iFEbqscgjwClBBjNeek cFCJcat3Mqm/xOMCVPMj26LRhrZDV1ncrV/ZcYzi6aHZRHo3LEAGESSUBYxq7TXd wABrtcaF20nIGb8/XubQmom2vcIEXXC839m9YL5k2pXUshFGRfkpRkHcKsbAyErH YBQ2fHMGmX0O+wB/v8mSnb3WCfVMRu4H4fjTv4iGmhLoCntcrmcZi6kyC3gc2QQe ClajfVPKBJQQHQ2eLq4Q4iDjsmlqf/zBjshVQ9T9ZXrJJmP3UH2kKuD2qmr0ds/v JOv+rNFKna6wozcd0HWilb8bHYGL8Buxg6M3ygihaVxNJTsF0p1nvvxhpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgsl8GIOdLRFrks55Ho22pqXrbBMB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrZg0pTA Of9WE4QUKBTIrGB3zS7+uBMvTyTSMsFP5O45Td7U0Of45XMoq4cEEIgn9A28bzgm Vjmu3f5Fro/mZMsfcXzmyGbO5kukQ/wHtQN23Pmm2+4xCLimuQ+hJcRc9DRe8LHB lSBVGTEbAWas+bWTIPCz0BGwxfwnP+gNVc9x6qAXdz6zDEy7O0mvQcGdyTHCt6EH SNWNyLitouWt1s/7nVm2UYTOWTxl1rehKoewf/yR9P5tAqpRKRRmo1QKLor0UtyP 2aHXSqroY4E0MZMrjyUM1Av29Rj2Jx6LscA9G3627F9LpB9nKUYNU+bEvCecnPox Nst1PWI+XddKyg== -----END CERTIFICATE-----Generated at Sun May 11 10:39:58 2025 by rpki-client